$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: Qr6L7190Pmcmwi4NXwz2kwubx/kAAJY7eCSKbrRR9Qk= Subject key identifier: 8B:36:2D:99:11:B0:14:D5:EE:7F:EA:53:44:34:FF:86:01:BF:F3:56 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: B2 Signing time: Sun 19 May 2024 06:31:59 +0000 Manifest this update: Sun 19 May 2024 06:31:59 +0000 Manifest next update: Sun 26 May 2024 06:31:59 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: hyo5n9Q11oFlq04r0WZQcVzk6wqeHea/wn+641ofvlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: May 19 06:31:59 2024 GMT Not After : May 26 06:31:59 2024 GMT Subject: CN=66499cdf-7a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:aa:31:79:46:7b:96:37:c7:b0:e7:07:ae: 54:db:e3:e9:74:02:f2:81:cc:3a:e3:b9:a9:d3:3d: 85:c8:06:c4:4f:aa:fd:69:c1:28:84:7a:90:24:02: b1:40:7d:d9:ff:2b:1b:31:18:db:94:1c:80:1c:69: 67:b0:4f:9c:fe:70:0d:a3:47:aa:8f:5f:95:3d:da: f4:b5:16:e1:2a:77:8b:1d:0e:a5:71:1e:75:b8:2c: 3a:d4:1f:36:05:ac:db:72:49:23:8e:2a:1e:74:de: 0f:e6:aa:46:92:4a:35:f5:c0:68:04:1f:31:d0:50: 53:a4:23:eb:5c:c2:e4:dd:1f:0e:57:72:92:f5:a7: 99:09:4a:fa:09:f1:f2:5f:a4:e8:12:77:8d:c4:8c: a8:f6:0a:c7:ff:21:ba:8a:f8:75:20:9b:8f:0e:80: 5b:07:78:46:8d:6d:f4:75:96:51:47:49:dd:bc:02: 7d:6e:b8:12:9b:99:c6:64:a4:f4:24:06:5a:d6:c2: 9d:8f:71:15:75:b2:b9:d7:0b:5f:c3:99:ef:ee:a4: f7:42:2c:d5:51:e3:93:0c:06:bd:0b:71:85:47:08: fd:a3:2c:79:92:fe:57:10:b0:d5:7a:e6:7e:d0:5a: 9b:5f:67:2a:1b:33:99:f9:50:bb:f3:51:93:93:1f: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:2D:99:11:B0:14:D5:EE:7F:EA:53:44:34:FF:86:01:BF:F3:56 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:ba:20:8e:23:6f:91:93:d8:98:9f:ed:d8:c3:bd:d5:ce: 21:25:93:71:73:53:d8:bf:11:98:22:27:45:64:ca:5d:06:f1: 3d:1c:27:2f:5e:ee:70:c7:40:27:81:34:0b:fb:dd:cc:84:5a: 3c:da:af:bd:dc:bf:e0:69:2e:0a:e8:3d:c5:c3:d7:85:28:c8: f2:b6:f8:e7:5c:37:31:7b:a4:e8:99:b0:0a:c1:93:49:cf:b0: 2c:f8:ce:36:29:4b:a2:0d:c0:af:8f:93:da:a6:59:b9:a9:d5: cb:a7:96:db:08:8e:eb:82:ae:ba:dc:fc:66:db:04:14:a5:d8: b5:6c:f1:03:05:d5:96:51:21:07:38:f8:c5:f5:22:71:9f:1e: 75:96:e6:f7:e0:16:49:0d:cc:06:bc:6d:90:35:73:41:8d:f7: 5b:44:48:69:7e:07:ed:f3:58:e7:71:cc:38:46:53:45:f6:75: 77:42:2c:98:21:06:a6:95:95:a7:fa:59:1a:3f:90:49:ed:8b: 91:d6:f2:61:d1:93:d3:80:9f:a8:51:2b:39:e7:fd:18:4c:64: 09:b0:9f:66:37:cb:28:6d:51:a1:6a:a7:d1:b4:b5:5c:09:67: 6a:23:60:c6:4d:f3:05:26:5e:5e:08:9f:d8:0c:6b:8f:6e:cd: 18:3f:02:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjQwNTE5MDYzMTU5WhcNMjQwNTI2MDYzMTU5WjAYMRYwFAYD VQQDEw02NjQ5OWNkZi03YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohOqMXlGe5Y3x7DnB65U2+PpdALygcw647mp0z2FyAbET6r9acEohHqQJAKx QH3Z/ysbMRjblByAHGlnsE+c/nANo0eqj1+VPdr0tRbhKneLHQ6lcR51uCw61B82 BazbckkjjioedN4P5qpGkko19cBoBB8x0FBTpCPrXMLk3R8OV3KS9aeZCUr6CfHy X6ToEneNxIyo9grH/yG6ivh1IJuPDoBbB3hGjW30dZZRR0ndvAJ9brgSm5nGZKT0 JAZa1sKdj3EVdbK51wtfw5nv7qT3QizVUeOTDAa9C3GFRwj9oyx5kv5XELDVeuZ+ 0FqbX2cqGzOZ+VC781GTkx96jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIs2LZkR sBTV7n/qU0Q0/4YBv/NWMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdbogjiNvkZPYmJ/t2MO91c4hJZNxc1PYvxGYIidFZMpdBvE9HCcv Xu5wx0AngTQL+93MhFo82q+93L/gaS4K6D3Fw9eFKMjytvjnXDcxe6TombAKwZNJ z7As+M42KUuiDcCvj5Paplm5qdXLp5bbCI7rgq663Pxm2wQUpdi1bPEDBdWWUSEH OPjF9SJxnx51lub34BZJDcwGvG2QNXNBjfdbREhpfgft81jnccw4RlNF9nV3QiyY IQamlZWn+lkaP5BJ7YuR1vJh0ZPTgJ+oUSs55/0YTGQJsJ9mN8sobVGhaqfRtLVc CWdqI2DGTfMFJl5eCJ/YDGuPbs0YPwJe -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org